Privacy Policy Effective Date: [Insert Date] 1. Who We Are This privacy policy applies to EndGrain CNC Limited, a company registered in the United Kingdom. Registered Address: Unit 54, Lydney Industrial Estate, Harbour Road, Lydney, GL15 4EJ, UK This document outlines how we collect, use, store, and protect your personal information in compliance with UK GDPR and other applicable data protection laws. 2. Information We Collect We may collect and process the following types of personal data: - Name - Email address - Phone number - Company name - Delivery and billing addresses - Enquiry details - IP address, browser type, and usage data (via cookies) 3. How We Collect Data Your data may be collected through: - Website forms (e.g., contact or quote requests) - Email or phone communications - Purchase orders or invoices 4. Why We Collect Your Data We collect and use your personal data to: - Respond to enquiries - Provide quotations and process orders - Deliver products and services - Send updates or administrative communications - Meet legal and tax obligations - Improve our website and services 5. Legal Basis for Processing We process data on the following legal bases: - Consent - when you opt in to marketing or data collection - Contract - to fulfil a service or supply request - Legal obligation - e.g., for accounting - Legitimate interest - e.g., business development, fraud prevention 6. Sharing Your Data We do not sell or rent your data. We may share your data with: - Payment processors - Couriers and logistics partners - IT or website service providers - Accountants or legal advisors (if required by law) All third parties are contractually bound to handle your data securely and lawfully. 7. International Transfers Your data is stored and processed within the UK. If we ever need to transfer data outside the UK or EEA, it will be protected using appropriate safeguards such as standard contractual clauses. 8. Cookies Our website does not use cookies or third-party tracking technologies for analytics purposes. 9. Data Retention We only retain personal data for as long as necessary: - Enquiry/contact data: up to 2 years - Order, invoice, and customer data: up to 7 years for legal/tax reasons 10. Your Rights Under data protection law, you have the right to: - Access your personal data - Request correction or deletion - Object to or restrict processing - Withdraw consent at any time - Lodge a complaint with the Information Commissioner's Office (ICO) 11. Contact Us To exercise your rights or if you have any questions about this policy, contact: EndGrain CNC Limited Unit 54, Lydney Industrial Estate, Harbour Road, Lydney, GL15 4EJ Email: support@endgraincnc.uk Phone: 01452 452654